CVE-2011-2912 Stack-based buffer overflow in the CSoundFile::ReadS3M function in src/load_s3m.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary cod...
MediumCVSS 6.8
EPSS 4.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the CSoundFile::ReadS3M function in src/load_s3m.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted S3M file with an invalid offset.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libmodplug(Debian:12) | < 1:0.8.8.4-1 | 1:0.8.8.4-1 |
| debian/libmodplug(Debian:13) | < 1:0.8.8.4-1 | 1:0.8.8.4-1 |
| debian/libmodplug(Debian:14) | < 1:0.8.8.4-1 | 1:0.8.8.4-1 |
| konstanty bialkowski libmodplug | <= 0.8.8.3 | No fix listed |
| konstanty bialkowski libmodplug | = 0.8 | No fix listed |
| konstanty bialkowski libmodplug | = 0.8.4 | No fix listed |
| konstanty bialkowski libmodplug | = 0.8.5 | No fix listed |
| konstanty bialkowski libmodplug | = 0.8.6 | No fix listed |
| konstanty bialkowski libmodplug | = 0.8.7 | No fix listed |
| konstanty bialkowski libmodplug | = 0.8.8 | No fix listed |
| konstanty bialkowski libmodplug | = 0.8.8.1 | No fix listed |
| konstanty bialkowski libmodplug | = 0.8.8.2 | No fix listed |
References
- Debian Security Tracker CVE-2011-2912 vendor-advisory
- jira.atheme.org
- FEDORA-2011-10503 vendor-advisory
- FEDORA-2011-12370 vendor-advisory
- openSUSE-SU-2011:0943 vendor-advisory
- modplug-xmms.git.sourceforge.net
- RHSA-2011:1264 vendor-advisory
- 45131 third-party-advisory vendor-advisory
- 45658 third-party-advisory vendor-advisory
- 45742 third-party-advisory vendor-advisory
- 45901 third-party-advisory vendor-advisory
- 46032 third-party-advisory vendor-advisory
- 46043 third-party-advisory vendor-advisory
- 46793 third-party-advisory vendor-advisory
- 48058 third-party-advisory vendor-advisory
- 48434 third-party-advisory vendor-advisory
- 48439 third-party-advisory vendor-advisory
- sourceforge.net
- USN-1255-1 vendor-advisory
- DSA-2415 vendor-advisory
- GLSA-201203-14 vendor-advisory
- GLSA-201203-16 vendor-advisory
- [oss-security] 20120810 CVE request: libmodplug: multiple vulnerabilities reported in <= 0.8.8.3 mailing-list
- [oss-security] 20120812 Re: CVE request: libmodplug: multiple vulnerabilities reported in <= 0.8.8.3 mailing-list
- 74209 vdb-entry
- 48979 vdb-entry
- libmodplug-s3m-bo(68984) vdb-entry